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Sir: 



Please amend the above-identified International Application before entry into 
the National stage before the U.S. Patent and Trademark Office under 35 U.S.C. §371 
as follows: 

In the Specification ; 

Please replace the Specification of the present application, including the 
Abstract, with the following Substitute Specification: 

SPECIFICATION 
TITLE 

METHOD AND APPARATUS FOR USER IDENTIFICATION 
BACKGROUND OF THE INVENTION 
The present invention relates to a method and an apparatus for user 
identification for the unambiguous identification of a user or subscriber to a system. 

Such a system can be, for example, a terminal such as a mobile telephone, or a 
building to which only certain persons should have access. However, it also can be a 
computer network which only allows access to certain data after unambiguous 
identification of the user; for example in on-line banking. 



It is known that the user identifies oneself by a personal identification number 
(PIN) only known to the user in the ideal case. However, this method has the 
disadvantage that the user can easily forget or mistake the number due to the 
multiplicity of numbers to be used. The PIN number is, therefore, frequently noted in 
notebooks or the like which, however, entails a security risk. 

For this reason, biometric identification methods recently have been developed 
in which biometric features of a user are used for the authentication. Such a biometric 
identification is a method for ensuring the allocation and the access of a certain person 
to a system or a location, which is not simple but is convenient and often very secure. 
Compared with the PIN code, the biometric identification has the advantage that it 
cannot be forgotten and the biometric features can be copied only by very elaborate 
measures or not at all. This is because, whereas the PIN code is pure software, there is 
always a more or less unambiguous correlation with the hardware, i.e. with the body of 
the respective user, in the case of biometric features. A possibility of such a biometric 
identification consists in the acquisition of the fingerprint of a finger of the user. The 
user places, for example, the right-hand thumb onto a contact area of an input device 
where the fingerprint patterns are detected with a resolution of approximately 50 jam. 
A computer unit compares the acquired fingerprint features such as branches or 
minuscules with the features of stored fingerprints of persons authorized for access. If 
there is a certain degree of correspondence which allows unambiguous identification 
of the user with very high probability, then use is allowed. 

The problem with such fingerprint recognition systems is, however, that the 
finger, especially if it is contaminated, leaves traces on the sensor in the form of the 
fingerprint which, under certain conditions, can lead to recognition of the same 
authorized person during a new access authorization check without the finger having 
been applied again. For example, it is conceivable that using a glove or the like, 
pressure is exerted on the fingerprint sensor with the traces of the finger of the 
preceding authorized user and thus the authorized user is recognized again. This can 
result in possible misuse of the user identification. 

The present invention is, therefore, directed to a method and apparatus for user 
identification using biometric data, particularly fingerprint data, in which an erroneous 
identification due to remaining traces of a preceding identification process is 
prevented. 
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Such object is achieved by an identification method having the follov^^ing steps: 

(I) acquisition of a biometric record of the user and the respective spatial 
position of the biometric data relative to a reference position; 

(II) storage of the biometric record and the associated position data; 

(III) reading out the biometric record and the associated position data of an 
identification process preceding the current identification process; and 

(IV) comparison of the biometric data currently acquired and associated 
position data with the preceding biometric data and associated position data read out 
and rejection of the identification if the biometric data have a defined degree of 
correspondence and the position of the corresponding biometric data corresponds 
within a defined tolerance range. 

The present invention is based on the fact that, as a rule, a user is not able to 
position his finger during a new placement on the sensor with an accuracy of less than 
100 |im in the vertical and horizontal direction. If a corresponding fingerprint with 
corresponding position is acquired during two successive identification processes, it is 
assumed that in the second identification process, the print traces remaining from the 
preceding identification process are being misused and access authorization is refiased. 

In an advantageous embodiment of the method of the present invention, a mean 
value of the positions of a number of individual features of the biometric data is 
determined during the acquisition of the biometric record and, during the position 
comparison check of two successive identification processes, these mean position 
values are compared with one another. Since the mean values are subject to less 
spread, for example due to a stietching or compression of the surface of the skin or 
because of the acquisition raster of the pickup device, the tolerance range in which a 
position correspondence is evaluated as misuse, can be selected to be narrower in this 
variant of the method so that unwanted nonrecognition of a finger placed down 
correctly twice in succession becomes more improbable. 

Additional features and advantages of the present invention are describe in, and 
will be apparent from, the following detailed description of the invention and the 
figures. 

BRIEF DESCRIPTION OF THE FIGURES 
Figiu-e 1 shows a diagrammatic block diagram of an exemplary embodiment of 
the apparatus according to the present invention. 
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Figure 2 shows a flowchart explaining an exemplary embodiment of the 
method according to the present invention. 

Figure 3 shows a flowchart explaining a further exemplary embodiment of the 
method according to the present invention. 

DETAILED DESCRIPTION OF THE INVENTION 

Referring to Figure 1, a fingerprint sensor 1 has a contact area 5 for placing a 
finger (indicated in dashed lines) and acquires the features such as branches or 
minuscules of the fingerprint. A position acquisition device 2 acquires the positions of 
these features relative to a reference position; for example, a coordinate origin of an xy 
coordinate system of the contact area 5. The fingerprint data and associated position 
information thus determined are supplied to a memory 3 and a comparison device 4. 
From the memory 3, the corresponding fingerprint data and position data of the 
preceding fingerprint acquisition are read out and also supplied to the comparison 
device 4. The fingerprint features and their positions are compared there and, in the 
case of a correspondence which is within a tolerance range, the comparison device 4 
evaluates the current fingerprint acquisition or, respectively, the current identification 
process as misuse of fingerprint traces of the last identification process and rejects 
access which is indicated on a display device 6. 

In this method, the present invention is based on the fact that 

(1) old fingerprint traces are no longer of consequence when a new arbitrary 
finger is placed on the area, and are replaced by the new print, and 

(2) a user will not be able to position his finger, when placing it down again, 
with such accuracy that the finger corresponds to the preceding fingerprint within up to 
100 nm or 50 jxm in position and direction. 

Since the position of the remaining traces of the earlier fingerprint of the 
preceding identification process cannot shift in space with respect to the sensor, it is 
not only the individual features of the fingerprint such as branches or minuscules but 
also their precise position on the contact area which are stored in the present invention; 
for example, as xy coordinates or as polar coordinates. If, in the case of a new 
fingerprint of a new identification process, corresponding features he within a 
tolerance range of 50 |im or 100 ^m at the same spatial position, it is highly probable 
that this is not a new placement of a finger of the same person but the features of the 
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last print. In this case, access authorization or identification must be refused and the 
user must be requested to place his/her finger again. 

An exemplary embodiment of the method according to the present invention 
will now be explained with reference to the flowchart of Figure 2. 

In a step SI, the biometric data and their associated positions on the contact 
area are acquired. In a step S2 these are stored for use in the user identification 
process following next. In step 3, accordingly, the biometric data and associated 
positions of the preceding identification process are read out. In step S4, a comparison 
is made to determine whether the features and positions of the two successive 
acquisitions, i.e. the fingerprint acquisition of the current user identification process 
and the fingerprint acquisition of the immediately preceding user identification 
process, correspond with each other. If both the features of the fmgerprint have a 
defined degree of correspondence and the positions of these features correspond to one 
another within a tolerance range of 50 |um or 100 ^im, the identification is refiised (step 
S5). Otherwise, the check continues to step S6 in which a check is made, as in known 
user identification methods, to determine whether the features of the current 
acquisition of the fingerprint correspond to the stored features of fingerprints of certain 
persons; for example, authorized users. If this is not so, identification is refused (step 
S7). Otherwise, identification takes place. 

The variant of the method explained in Figure 3 differs fi-om that shown in 
Figure 2 in that a mean value of the positions of acquired features of the biometric 
record (fingerprint) is calculated and stored in a step SI 1. In step S4, it is then not the 
positions of individual features of the fingerprints but the mean position values of the 
current fingerprint acquisition and the preceding one which are compared with one 
another. This has the advantage that statistic deviations due to stretching or 
compression of the skin or due to the pixel spacing of the contact area 5 of the 
fingerprint sensor are averaged out so that the tolerance range can be selected to be 
smaller; for example, 10 |am to 20 fxm. This reduces the probability of unjustified 
rejections of the identification. 

The present invention provides an improved method for biometric user 
identification in which misuse due to fingerprint traces of a preceding user 
identification which are remaining on the acquisition device can be prevented. The 
present invention can be applied to checking the authorization to use devices such as, 



for example, mobile telephones or for identifying a computer user in bank transactions. 
However, other applications also are conceivable in which the identity of a person 
must be reliably established on the basis of biometric data such as, for example, a 
fingerprint. 

Although the present invention has been described with reference to specific 
embodiments, those of skill in the art will recognize that changes may be made thereto 
without departing from the spirit and the scope of the invention as set forth in the 
hereafter appended claims. 

ABSTRACT OF THE DISCLOSURE 

A method and apparatus for user identification involving: 

( 1 ) acquisition of a biometric record, preferably fingerprint data, of the user 
and the respective spatial position of the biometric data relative to a reference position; 

(2) storage of the biometric record and the associated position data; 

(3) reading out the biometric record and the associated position data of a 
user identification process preceding the current user identification process; and 

(4) comparison of the biometric record currently acquired and associated 
position data with the preceding biometric data and associated position data read out 
and rejection of the identification if the biometric record has a defined degree of 
correspondence and the position of the corresponding biometric data corresponds 
within a defined tolerance range. 

In the claims : 

On page 8, cancel line 1, and substitute the following left-hand justified 
heading therefor: 
CLAIMS 

Please cancel claims 1-16 without prejudice, and substitute the following 
claims therefore: 

17. A method for biometric identification of a user, the method comprising 
the steps of: 

acquiring, in a current user identification process, both a biometric 
record of the user and associated spatial position data of the biometric record relative 
to a reference position; 

storing both the biometric record and the associated spatial position 

data; 
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reading out both a preceding biometric record and preceding associated 
spatial position data of a preceding user identification process which precedes the 
current user identification process; 

comparing the biometric record currently acquired and the associated 
spatial position data with the preceding biometric record and the associated spatial 
position data read out; and 

rejecting the identification of the user if there is a defined degree of 
correspondence between the biometric record currently acquired and the preceding 
biometric record, and the spatial position data currently acquired is within a defined 
tolerance range from the preceding spatial position data. 

18. A method for biometric identification of a user as claimed in Claim 1 7, 
wherein the tolerance range is less than 100 ^im. 

19. A method for biometric identification of a user as claimed in Claim 17, 
wherein the tolerance range is approximately 50 ^m. 

20. A method for biometric identification of a user as claim in Claim 1 7, 
the method fiirther comprising the steps of: 

determining a mean value of positions of a plurality of individual 
features of the biometric record in each user identification process; and 

using the mean values of two successive user identification processes in 
the step of comparing. 

21 . A method for biometric identification of a user as claimed in Claim 20, 
wherein the tolerance range is less than 50 f4.m. 

22. A method for biometric identification of a user as claimed in Claim 20, 
wherein the tolerance range is between 10 ^m and 20 nm. 

23. A method for biometric identification of a user as claimed in Claim 17, 
wherein the biometric record is fingerprint data. 

24. A method for biometric identification of a user as claimed in Claim 23, 
the method fiirther comprising the step of: 

determining, as the spatial position data, coordinates of at least one of 
branches and minuscules of the fingerprint on a contact area. 

25 . A method for biometric identification of a user as claimed in Claim 1 7, 
the method further comprising the steps of 



deleting, after a user identification process has ended, the stored 
biometric record in the associated spatial position data of the preceding identification 
process; and 

overriding the previously stored biometric record and the associated 
spatial position data of the preceding identification process with the biometric record 
and the associated spatial position data of the current identification process. 

26. An apparatus for biometric identification of a user, comprising; 

a device for acquiring, in a current user identification process, both a 
biometric record of the user and associated spatial position data of the biometric record 
relative to a reference position; 

a memory for storing both the biometric record and the associated 
spatial position data; and 

a comparison device for comparing the biometric record currently 
acquired and the associated spatial position data with a preceding biometric record and 
preceding associated spatial position data of a preceding user identification process, 
and for rejecting the identification of the user if there is a defined degree of 
correspondence between the biometric record currently acquired and the preceding 
biometric record, and the spatial position data currently acquired is within a defined 
tolerance range flrom the preceding spatial identification data. 

27. An apparatus for biometric identification of a user as claimed in Claim 
26, further comprising: 

an output device for outputting a result of the user identification 

process. 

28. An apparatus for biometric identification of a user as claimed in Claim 
26, wherein the tolerance range is less than 100 ^tm. 

29. An apparatus for biometric identification of a user as claimed in Claim 
26, wherein the tolerance range is approximately 50 ^m. 

30. An apparatus for biometric identification of a user as claimed in Claim 
26, further comprising: 

a device for calculating a mean value of positions of a plurahty of 
individual features of the biometric record in each user identification process, wherein 
the comparison device compares the mean values of two successive user identification 
processes. 
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3 1 . An apparatus for biometric identification of a user as claimed in Claim 
30, wherein the tolerance range is less than 50 jim. 

32. An apparatus for biometric identification of a user as claimed in Claim 
30, wherein the tolerance range is between 10 |u.m and 20 |xm. 

33. An apparatus for biometric identification of a user as claimed in Claim 
26, fiarther comprising: 

a fingerprint sensor for acquiring a fingerprint as the biometric record 
and the associated spatial position data on a contact area of the fingerprint sensor. 

34. An apparatus for biometric identification of a user as claimed in Claim 

33, wherein the fingerprint sensor determines coordinates of certain features of the 
fingerprint on the contact area. 

35. An apparatus for biometric identification of a user as claimed in Claim 

34, wherein the certain features of the fingerprint are at least one of branches and 
minuscules. 

REMARKS 

The present amendment makes editorial changes and corrects typographical 
errors in the specification, which includes the Abstract, in order to conform the 
specification to the requirements of United States Patent Practice. No new matter is 
added thereby. Attached hereto is a marked-up version of the changes made to the 
specification by the present amendment. The attached page is captioned " Version 
With Markings To Show Changes Made". 

hi addition, the present amendment cancels original claims 1-16 in favor of 
new claims 17-35. Claims 17-35 have been presented solely because the revisions by 
red-hning and underlining which would have been necessary in claims 1-16 in order to 
present those claims in accordance with preferred United States Patent Practice would 
have been too extensive, and thus would have been too burdensome. The present 
amendment is intended for clarification purposes only and not for substantial reasons 
related to patentability pursuant to 35 U.S.C. §§103, 102, 103 or 1 12. Indeed, the 
cancellation of claims 1-16 does not constitute an intent on the part of the Applicants 
to surrender any of the subject matter of claims 1-16. 



Early consideration on the merits is respectfully requested. 
Respectfully submitted, 



c/? 




rReg. No. 39,056) 



William E. Vaughan h 
Bell, Boyd & Lloyd jtLC 
P.O. Box 1135 

Chicago, Illinois 60690-1135 
(312) 807-4292 
Attorneys for Applicants 
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VERSION WITH MARKINGS TO SHOW CHANGES MADE 



In The Specification: 

The Specification of the present application, including the Abstract, has been 
amended as follows: 

SPECIFICATION 
TITLE OF THE INVENTION 
METHOD AND APPARATUS FOR USER IDENTIFICATION 
Dcscript ien 

User identification method 

BACKGROUND OF THE INVENTION 

The present invention relates to a method and a devic e an apparatus for user 
identification for the unambiguous identification of a user or subscriber to a system. 

Such a system can be, for example, a terminal such as a mobile telephone, or a 
building to which only certain persons should have access. However, it eeffi also can 
be a computer network which only allows access to certain data after unambiguous 
identification of the user^; for example in on-line banking. 

It is known that the user identifies himself oneself by a personal identification 
number (PIN) only known to him the user in the ideal case. However, this method has 
the disadvantage that the user can easily forget or mistake the number due to the 
multiplicity of numbers to be used. The PIN number is, therefore, frequently noted in 
notebooks or the like which, however, entails a security risk. 

For this reason, biometric identification methods recently have been recently 
developed in which biometric features of a user are used for the authentication. Such a 
biometric identification is a method for ensuring the allocation and the access of a 
certain person to a system or a location, which is not simple but is convenient and 
often very secure. Compared with the PIN code, the biometric identification has the 
advantage that it cannot be forgotten and the biometric features can be copied only by 
very elaborate means measures or not at all. This is because, whereas the PIN code is 
pure software, there is always a more or less unambiguous correlation with the 
hardware, i.e. with the body of the respective user, in the case of biometric features. A 
possibility of such a biometric identification consists in the acquisition of the 
fingerprint of a finger of the user. The latter user places, for example, the right-hand 
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thviinb onto a contact area of an input device where the fingerprint patterns are 
detected with a resolution of approximately 50 ^m. A computer unit compares the 
acquired fingerprint features such as branches or minuscules with the features of stored 
fingerprints of persons authorized for access. If there is a certain degree of 
correspondence which allows unambiguous identification of the user with very high 
probability, then use is allowed. 

The problem with such fingerprint recognition systems is, however, that the 
finger, especially if it is contaminated, leaves traces on the sensor trac e s in the form of 
the fingerprint which, under certain conditions, can lead to recognition of the same 
authorized person during a new access authorization check without the finger having 
been applied again. For example, it is conceivable that using a glove or the like, 
pressure is exerted on the fingerprint sensor with the traces of the finger of the 
preceding authorized user and thus the authorized user is recognized again. This can 
result in possible misuse of the user identification. 

The present invention is, therefore, based on the object of proposing directed to 
a method and apparatus for user identification by means of using biometric data, 
particularly fingerprint data, in which an erroneous identification due to remaining 
traces of a preceding identification process is prevented. 

Sie Such object is achieved by an identification method having the following 

steps^ 

(D acquisitio n ^ Acquisition of a biometric record of the user and the 
respective spatial position of the biometric data relative to a reference positional 

(II) Storage storage of the biometric record and the associated position 

dataji 

(III) Reading reading out the biometric record and the associated position 
data of an identification process preceding the current identification process : and? 

(IV) Comparison comparison of the biometric data currently acquired and 
associated position data with the preceding biometric data and associated position data 
read out and rejection of the identification if the biometric data have a defined degree 
of correspondence and the position of the corresponding biometric data corresponds 
within a defined tolerance range. 

The present invention is based on the fact that, as a rule, a user is not able to 
position his finger during a new placement on the sensor with an accuracy of less than 
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100 nm in the vertical and horizontal direction. If a corresponding fingerprint with 
corresponding position is acquired during two successive identification processes, it is 
assumed that in the second identification process, the print traces remaining fi-om the 
preceding identification process are being misused and access authorization is refiised. 

Th e invention also proposes a d e vice for biometric us e r identification having 
the f e atur e s of claim 8. Advantageous fiirther developments of the method according 
to th e inv e ntion and of th e devic e according to the invention are described in th e 
subclaims. 

In an advantageous fluth e r dev e lopment of th e method In an advantageous 
embodiment of the method of the present invention , a mean value of the positions of a 
number of individual features of the biometric data is determined during the 
acquisition of the biometric record and, during the position comparison check of two 
successive identification processes, these mean position values are compared with one 
another. Since the mean values are subject to less spread, for example due to a 
stretching or compression of the surface of the skin or because of the acquisition raster 
of the pickup device, the tolerance range in which a position correspondence is 
evaluated as misuse, can be selected to be narrower in this variant of the method so 
that unwanted nonrecognition of a finger placed down correctly twice in succession 
becomes more improbable. 

BRIEF DESCRIPTION OF THE FIGURES 

In the text which follows, the inv e ntion will be explained in detail by means of 
ex e mplary embodiments and r e f e rring to the drawings, in which 

Figure 1 shows a diagrammatic block diagram of an exemplary embodiment of 
the d e vice apparatus according to the present invention^^ 

Figure 2 shows a flowchart explaining an exemplary embodiment of the 
method according to the present inventionrand. 

Figure 3 shows a flowchart explaining a further exemplary embodiment of the 
method according to the invention, present invention. 

Firstly, an e x e mplary embodim e nt of th e invention will be explained with 
ref e r e nce to th e block diagram in Figure 1 . 
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DETAILED DESCRIPTION OF THE INVENTION 
A Referring to Figure 1, a fingerprint sensor 1 has a contact area 5 for placing a 
finger (indicated in dashed Unes) and acquires the features such as branches or 
minuscules of the fingerprint. A position acquisition device 2 acquires the positions of 
these features relative to a reference position^; for example^ a coordinate origin of an 
xy coordinate system of the contact area 5. The fingerprint data and associated 
position information thus determined are supplied to a memory 3 and a comparison 
device 4. From the memory 3, the corresponding fingerprint data and position data of 
the preceding fingerprint acquisition are read out and also supplied to the comparison 
device 4. The fingerprint features and their positions are compared there^ and^ in the 
case of a correspondence which is within a tolerance range, the comparison device 4 
evaluates the current fingerprint acquisition or, respectively, the current identification 
process as misuse of fingerprint traces of the last identification process and rejects 
access which is indicated on a display device 6. 

In this method, the present invention is based on the fact that 

(1) old fingerprint traces are no longer of consequence when a new arbitrary 
finger is placed on the area, and are replaced by the new print, and 

(2) a user will not be able to position his finger, when placing it down again, 
with such accuracy that the finger corresponds to the preceding fingerprint within up to 
100 |j,m or 50 \im in position and direction. 

Since the position of the remaining traces of the earlier fingerprint of the 
preceding identification process cannot shift in space with respect to the sensor, it is 
not only the individual features of the fingerprint such as branches or minuscules but 
also their precise position on the contact area which are stored in the present 
invention^; for example^ as xy coordinates or as polar coordinates. If, in the case of a 
new fingerprint of a new identification process, corresponding features he within a 
tolerance range of 50 or 100 ^m at the same spatial position, it is highly probable 
that this is not a new placement of a finger of the same person but the features of the 
last print. In this case, access authorization or identification must be refused and the 
user must be requested to place his his/her finger again. 

An exemplary embodiment of the method according to the present invention 
will now be explained with reference to the flowchart of figur e Figure 2. 
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In a step SI, the biometric data and their associated positions on the contact 
area are acquired. In a step S2 these are stored for use in the user identification 
process following next. In step 3, accordingly, the biometric data and associated 
positions of the preceding identification process are read out. In step S4, a comparison 
is made to determine whether the features and positions of the two successive 
acquisitions, i.e. the fingerprint acquisition of the current user identification process 
and the fingerprint acquisition of the immediately preceding user identification 
process^ correspond with each other. If both the features of the fingerprint have a 
defined degree of correspondence and the positions of these features correspond to one 
another within a tolerance range of 50 ^m or 100 ^m, the identification is refiised (step 
S5) , oth e rwise . Otherwise , the check continues to step S6 in which a check is made, as 
in known user identification methods, to determine whether the features of the current 
acquisition of the fingerprint correspond to the stored features of fingerprints of certain 
persons^; for example^ authorized users. If this is not so, identification is refused (step 
S7) , otherwiso . Otherwise , identification takes place. 

The variant of the method explained in figur e Figure 3 differs from that shown 
in figur e 2 Figure 2 in that a mean value of the positions of acquired features of the 
biometric record (fingerprint) is calculated and stored in a step S 11 . In step S4, it is 
then not the positions of individual features of the fingerprints but the mean position 
values of the current fingerprint acquisition and the preceding one which are compared 
with one another. This has the advantage that statistic deviations due to stretching or 
compression of the skin or due to the pixel spacing of the contact area 5 of the 
fingerprint sensor are averaged out so that the tolerance range can be selected to be 
smalleryi for example^ 10 |j.m to 20 ^im. This reduces the probability of imjustified 
rejections of the identification. 

The present invention provides an improved method for biometric user 
identification in which misuse due to fingerprint traces of a preceding user 
identification which are remaining on the acquisition device can be prevented. The 
present invention can be applied to checking the authorization to use devices such as, 
for example, mobile telephones or for identifying a computer user in bank transactions. 
However, other apphcations are also ^ conceivable in which the identity of a person 
must be reliably established on the basis of biometiic data such as, for example, a 
fingerprint. 

15 



Abstract 
Us e r id e ntification m e thod 

ABSTRACT 

A method and apparatus for biom e tric user identification exhibits th e ^ollowing 
stepsf involving: 

(1) Acquisitiond ) acquisition of a biometric recor d, preferably fingerprint 
data, of the user and the respective spatial position of the biometric data relative to a 
reference position^; 

(2) Storage storage of the biometric record and the associated position 

data^i 

(3) Reading reading out the biometric record and the associated position 
data of a user identification process preceding the current user identification process; 
and? 

(4) Comparison comparison of the biometric date record cvirrently acquired and 
associated position data with the preceding biometric data and associated position data 
read out and rejection of the identification if the biometric data have record has a 
defined degree of correspondence and the position of the corresponding biometric data 
corresponds within a defined tolerance range. The biometric data ar e preferably 
fing e rprint data. 

(Figure 2) 
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Description 

User identification method 



5 The invention relates to a method and a device for user 
identification for the unambiguous identification of a 
user or subscriber to a system. 

Such a system can be, for example, a terminal such as a 
0 mobile telephone, or a building to which only certain 
persons should have access. However, it can also be a 
computer network which only allows access to certain 
data after unambiguous identification of the user, for 
example in on-line banking. 

5 

It is known that the user identifies himself by a 
personal identification number (PIN) only known to him 
in the ideal case. However, this method has the 
disadvantage that the user can easily forget or mistake 
0 the number due to the multiplicity of numbers to be 
used. The PIN number is, therefore, frequently noted in 
notebooks or the like which, however, entails a 
security risk. 

5 For this reason, biometric identification methods have 
been recently developed in which biometric features of 
a user are used for the authentication. Such a 
biometric identification is a method for ensuring the 
allocation and the access of a certain person to a 
0 system or a location, which is not simple but is 
convenient and often very secure. Compared with the PIN 
code, the biometric identification has the advantage 
that it cannot be forgotten and the biometric features 
can be copied only by very elaborate means or not at 
This is because, whereas the PIN code is 
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pure software, there is always a more or less 
unambiguous correlation with the hardware, i.e. with 
the body of the respective user, in the case of 
biometric features. A possibility of such a 
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biometric identification consists in the acquisition of 
the fingerprint of a finger of the user. The latter 
places, for example, the right-hand thumb onto a 
contact area of an input device where the fingerprint 
5 patterns are detected with a resolution of 
approximately 50 pm. A computer unit compares the 
acquired fingerprint features such as branches or 
minuscules with the features of stored fingerprints of 
persons authorized for access. If there is a certain 
10 degree of correspondence which allows unambiguous 
identification of the user with very high probability, 
then use is allowed. 

The problem with such fingerprint recognition systems 
15 is, however, that the finger, especially if it is 
contaminated, leaves on the sensor traces in the form 
of the fingerprint which, under certain conditions, can 
lead to recognition of the same authorized person 
during a new access authorization check without the 
20 finger having been applied again. For example, it is 
conceivable that using a glove or the like, pressure is 
exerted on the fingerprint sensor with the traces of 
the finger of the preceding authorized user and thus 
the authorized user is recognized again. This can 
25 result in possible misuse of the user identification. 

The invention is, therefore, based on the object of 
proposing a method for user identification by means of 
biometric data, particularly fingerprint data, in which 
30 an erroneous identification due to remaining traces of 
a preceding identification process is prevented. 

The object is achieved by an identification method 
having the following steps 
35 (I) Acquisition of a biometric record of the user and 
the respective spatial position of the biometric data 
relative to a reference position. 
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(II) Storage of the biometric record and the associated 
position data, 

(III) Reading out the biometric record and the 
associated position data of an identification process 

5 preceding the current identification process, 

(IV) Comparison of the biometric data currently 
acquired and associated position data with the 
preceding biometric data and associated position data 
read out and rejection of the identification if the 

10 biometric data have a defined degree of correspondence 
and the position of the corresponding biometric data 
corresponds within a defined tolerance range. 

The invention is based on the fact that, as a rule, a 
15 user is not able to position his finger during a new 
placement on the sensor with an accuracy of less than 
100 pm in the vertical and horizontal direction. If a 
corresponding fingerprint with corresponding position 
is acquired during two successive identification 
20 processes, it is assumed that in the second 
identification process, the print traces remaining from 
the preceding identification process are being misused 
and access authorization is refused. 

25 The invention also proposes a device for biometric user 
identification having the features of claim 8. 
Advantageous further developments of the method 
according to the invention and of the device according 
to the invention are described in the subclaims. 

30 

In an advantageous further development of the method, a 
mean value of the positions of a number of individual 
features of the biometric data is determined during the 
acquisition of the biometric record and, during the 
35 position comparison check of two successive 
identification processes, these mean position values 
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are compared with one another. Since the mean values 
are subject to less spread, for example due to a 
stretching or 
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compression of the surface of the skin or because of 
the acquisition raster of the pickup device, the 
tolerance range in which a position correspondence is 
evaluated as misuse, can be selected to be narrower in 
5 this variant of the method so that unwanted 
nonrecognition of a finger placed down correctly twice 
in succession becomes more improbable. 



In the text which follows, the invention will be 
explained in detail by means of exemplary embodiments 
and referring to the drawings, in which 

Figure 1 shows a diagrammatic block diagram of an 
exemplary embodiment of the device according to the 
invention. 

Figure 2 shows a flowchart explaining an exemplary 
embodiment of the method according to the invention, 
and 

Figure 3 shows a flowchart explaining a further 
exemplar^y — ^embodiment of the method according to the 
invention. 



Firstly, an exemplary embodiment of the invention will 
be explained with reference to the block diagram in 
Figure 1 . 

25 

A fingerprint sensor 1 has a contact area 5 for placing 
a finger (indicated in dashed lines) and acquires the 
features such as branches or minuscules of the 
fingerprint. A position acquisition device 2 acquires 

30 the positions of these features relative to a reference 
position, for example a coordinate origin of an xy 
coordinate system of the contact area 5. The 
fingerprint data and associated position information 
thus determined are supplied to a memory 3 and a 

35 comparison device 4. From the memory 3, the 
corresponding fingerprint data and position data of the 
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preceding fingerprint acquisition are read out and also 
supplied to the comparison device 4. The fingerprint 
features and their positions are compared there, and in 
the case of a correspondence which is within a 
tolerance range, the comparison device 4 evaluates the 
current fingerprint acquisition or, respectively, the 
current 
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identification process as misuse of fingerprint traces 
of the last identification process and rejects access 
which is indicated on a display device 6. 

In this method, the invention is based on the fact that 

(1) old fingerprint traces are no longer of 
consequence when a new arbitrary finger is placed 
on the area, and are replaced by the new print, 
and 

(2) a user will not be able to position his 
finger, when placing it down again, with such 
accuracy that the finger corresponds to the 
preceding fingerprint within up to 100 pm or 50 pm 
in position and direction. 

Since the position of the remaining traces of the 
earlier fingerprint of the preceding identification 
process cannot shift in space with respect to the 
sensor, it is not only the individual features of the 
fingerprint such as branches or minuscules but also 
their precise position on the contact area which are 
stored in the present invention, for example as xy 
coordinates or as polar coordinates. If, in the case of 
a new fingerprint of a new identification process, 
corresponding features lie within a tolerance range of 
50 pm or 100 pm at the same spatial position, it is 
highly probable that this is not a new placement of a 
finger of the same person but the features of the last 
print. In this case, access authorization or 
identification must be refused and the user must be 
requested to place his finger again. 



35 



An exemplary embodiment of the method according to the 
invention will now be explained with reference to the 
flowchart of figure 2. 



GR 99 P 1259 

-Ba- 
in a step SI, the biometric data and their associated 
positions on the contact area are acquired. In a step 
S2 these are stored for use 
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in the user identification process following next. In 
step 3, accordingly, the biometric data and associated 
positions of the preceding identification process are 
read out. In step S4, a comparison is made to determine 
5 whether the features and positions of the two 
successive acquisitions, i.e. the fingerprint 
acquisition of the current user identification process 
and the fingerprint acquisition of the immediately- 
preceding user identification process correspond with 

10 each other. If both the features of the fingerprint 
have a defined degree of correspondence and the 
positions of these features correspond to one another 
within a tolerance range of 50 or 100 ]jm, the 

identification is refused (step S5) , otherwise, the 

15 check continues to step S6 in which a check is made, as 
in known user identification methods, to determine 
whether the features of the current acquisition of the 
fingerprint correspond to the stored features of 
fingerprints of certain persons, for example authorized 

20 users. If this is not so, identification is refused 
(step S7), otherwise, identification takes place. 

The variant of the method explained in figure 3 differs 
from that shown in figure 2 in that a mean value of the 

25 positions of acquired features of the biometric record 
(fingerprint) is calculated and stored in a step Sll. 
In step S4, it is then not the positions of individual 
features of the fingerprints but the mean position 
values of the current fingerprint acquisition and the 

30 preceding one which are compared with one another. This 
has the advantage that statistic deviations due to 
stretching or compression of the skin or due to the 
pixel spacing of the contact area 5 of the fingerprint 
sensor are averaged out so that the tolerance range can 

35 be selected to be smaller, for example 10 pro to 20 pm. 
This reduces the probability of unjustified rejections 
of the identification. 
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The invention provides an improved method for biometric 
user identification in which misuse due to fingerprint 
traces of a preceding user identification which are 
remaining on the acquisition device can be prevented. 
The invention can be applied to checking the 
authorization to use devices such as, for example, 
mobile telephones or for identifying a computer user in 
bank transactions. However, other applications are also 
conceivable in which the identity of a person must be 
reliably established on the basis of biometric data 
such as, for example, a fingerprint. 
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1. A method for biometric user identification having 
the following steps 

5 (1) Acquisition of a biometric record of the user and 
the respective spatial position of the biometric data 
relative to a reference position, 

(2) Storage of the biometric record and the associated 
position data, 

10 (3) Reading out of the biometric record and the 
associated position data of a user identification 
process preceding the current user identification 
process, 

(4) Comparison of the biometric data currently 
15 acquired and associated position data with the 
preceding biometric data and associated position data 
read out and rejection of the identification if the 
biometric data have a defined degree of correspondence 
and the position of the corresponding biometric data 
20 corresponds within a defined tolerance range. 

2. The method as claimed in claim 1, 

characterized in that the tolerance range is less than 
100 i-im, preferably about 50 pm. 

25 

3. The method as claimed in claim 1, 

characterized in that a mean value of the positions of 
a number of individual features of the biometric data 
is in each case determined and the positions of the 
30 mean values of two successive identification processes 
thus formed are compared in step (4) . 

4. The method as claimed in claim 3, 
characterized in that 
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the tolerance range is less than 50 lam, preferably 
between 10 ]im and 2 0 jam. 

5. The method as claimed in one of claims 1 to 4, 

5 characterized in that the biometric data are 
fingerprint data. 

6. The method as claimed in claim 5, 

characterized in that, as position data, the 
10 coordinates of bifurcations or minuscules of the 
fingerprint on a contact area are determined. 

7. The method as claimed in one of claims 1 to 6, 
characterized in that, after an identification process 

15 has ended, the stored data of the preceding 
identification process are deleted and overwritten by 
the data of the current identification process. 

8. A device for biometric user identification, 
20 exhibiting 

a device (1) for acquiring a biometric record of the 
user and of the respective spatial positions of the 
data relative to a reference position, 

a memory (3) for ' storing the biometric data and the 

25 associated position data, 

a comparison device (4) for comparing the biometric 
data and the associated position data of a current 
identification process with the biometric data and 
associated position data of a respective preceding 

30 identification process and for refusing the 
identification if the biometric data compared have a 
defined degree of correspondence and the positions of 
the corresponding biometric data correspond within a 
defined tolerance range. 
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9. The device as claimed in claim 8, 

characterized by an output device (6) for outputting 
the result of the user identification. 



10. The device as claimed in claim 8 or 9, 
characterized in that the tolerance range is less than 
100 ]jLm, preferably about 50 pm. 

11. The device as claimed in one of claims 8 to 10, 
characterized by a device (5) for calculating a mean 
value of the positions of a number of individual 
features of the biometric data and in which the 
comparison device (4) compares the positions of the 
mean values of corresponding features of successive 
user identification processes. 

12. The device as claimed in claim 11, 

characterized in that the tolerance range is less than 
50 pm, preferably between 10 ]im and 20 \im. 

13. The device as claimed in one of claims 8 to 12, 
characterized by a fingerprint sensor (1) for acquiring 
the fingerprint as biometric data and its position on a 
contact area (5) of the fingerprint sensor (1) , 

14. The device as claimed in claim 13, 

characterized in that the fingerprint sensor (1) 
determines the coordinates of certain features of the 
fingerprint on the contact area (5) . 



15. The device as claimed in claim 14, 
characterized in that 
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the features of the fingerprint are branches or 
minuscules , 

16. The use of the method as claimed in one of claims 
1 to 7 or of the device as claimed in one of claims 8 
to 15 for checking the access authorization for the use 
of a mobile telephone or access to a computer network. 
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Abstract 

User identification method 

A method for biometric user identification exhibits the 
following steps: 

(1) Acquisition of a biometric record of the user and 
the respective spatial position of the biometric data 
relative to a reference position, 

(2) Storage of the biometric record and the associated 
position data, 

(3) Reading out the biometric record and the 
associated position data of a user identification 
process preceding the current user identification 
process , 

(4) Comparison of the biometric data currently 
acquired and associated position data with the 
preceding biometric data and associated position data 
read out and rejection of the identification if the 
biometric data have a defined degree of correspondence 
and the position of the corresponding biometric data 
corresponds within a defined tolerance range. The 
biometric data are preferably fingerprint data. 



(Figure 2) 
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Als nachstehend benannter Erfinder erklare ich hiermit As a below named inventor, I hereby declare that: 

an Eides Statt: 



dass mein Wohnsitz, meine Postanschrift, und meine My residence, post office address and citizenship are 

Staatsangehorigkeit den Im Nachstehenden nach as stated below next to my name, 

meinem Namen aufgefuhrten Angaben entsprechen, 



dass ich, nach bestem Wissen der ursprungliche, erste 
und alleinige Erfinder (falls nachstehend nur ein Name 
angegeben ist) oder ein ursprunglicher, erster und 
Miterfinder (falls nachstehend mehrere Namen 
aufgefuhrt sind) des Gegenstandes bin, fur den dieser 
Antrag gestellt wird und fLir den ein Patent beantragt 
wird fur die Erfindung mit dem Titel: 

Benutzeridentifikationsverfahren 



deren Beschreibung 

(zutreffendes ankreuzen) 
r~l hier beigefugt ist. 
13 am 22.02.2000 als 
PCT Internationale Anmeldung 

PCT Anmeldungsnummer PCT/DEOO/00492 

eingereicht wurde und am 

abgeandert wurde (falls tatsachlich abgeandert). 



1 believe I am the original, first and sole inventor (if only 
one name is listed below) or an original, first and joint 
inventor (if plural names are listed below) of the 
subject matter which Is claimed and for which a patent 
is sought on the Invention entitled 



User identifcation method 



the specification of which 

(check one) 
□ is attached hereto. 
13 was filed on 22.02.2000 as 
PCT international application 
PCT Application No. PCT/DEOO/00492 
and was amended on _ 



(if applicable) 



Ich bestatige hiermit, dass ich den Inhalt der obigen 
Patentanmeldung einschliesslich der Anspruche 
durchgesehen und verstanden habe, die eventuell 
durch einen Zusatzantrag wie oben erwahnt abgean- 
dert wurde. 



I hereby state that I have reviewed and understand the 
contents of the above identified specification, including 
the claims as amended by any amendment referred to 
above. 



Ich erkenne meine Pflicht zur Offenbarung irgendwel- 
cher Informationen, die fiir die Prufung der vorliegen- 
den Anmeldung in Einklang mit Absatz 37, Bundes- 
gesetzbuch. Paragraph 1.56(a) von Wichtigkeit sind, 
an. 



1 acknowledge the duty to disclose information which is 
material to the examination of this application in 
accordance with Title 37, Code of Federal Regulations, 
§1. 56(a). 



Ich beanspruche hiermit auslandische Prioritatsvorteile 
gemass Abschnitt 35 der Zivilprozessordnung der 
Vereinigten Staaten, Paragraph 119 aller unten ange- 
gebenen Auslandsanmeldungen fur ein Patent oder 
eine Erfindersurkunde, und habe auch alle Auslands- 
anmeldungen fur ein Patent oder eine Erfindersurkun- 
de nachstehend gekennzeichnet, die ein Anmelde- 
datum haben, das vor dem Anmeldedatum der 
Anmeldung liegt, fQr die Prioritat beansprucht wird. 



I hereby claim foreign priority benefits under Title 35, 
United States Code, §119 of any foreign application(s) 
for patent or inventor's certificate listed below and have 
also identified below any foreign application for patent 
or inventor's certificate having a filing date before that 
of the application on which priority is claimed: 
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derfrQheren Anmeldung und dem nationalen oder PCT 
internationalen Anmeldedatum dieser Anmeldung 
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1 hereby claim the benefit under Title 35. United States 
Code. §120 of any United States application(s) listed 
below and, insofar as the subject matter of each of the 
claims of this application is not disclosed in the prior 
United States application in the manner provided by 
the first paragraph of Title 35, United States Code, 
§122, 1 acknowledge the duty to disclose material 
information as defined in Title 37, Code of Federal 
Regulations, §1. 56(a) which occured between the filing 
date of the prior application and the national or PCT 
international filing date of this application. 
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(Application Serial No.) 
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rung in Kenntnis dessen abgebe, dass wissentlich und 
vorsatzlich falsche Angaben gemass Paragraph 1001, 
Absatz 18 der Zivilprozessordnung der Vereinigten 
Staaten von Amerika mit Geldstrafe belegt und/oder 
Gefangnis bestraft werden koennen, und dass derartig 
wissentlich und vorsatzlich falsche Angaben die Gul- 
tigkeit der vorliegenden Patentanmeldung oder eines 
darauf erteilten Patentes gefahrden konnen. 


1 hereby declare that all statements made herein of my 
own knowledge are true and that all statements made 
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knowledge that willful false statements and the like so 
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